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APPARATUS AND METHOD FOR PARTITIONING 
AND MANAGING SUBSYSTEM LOGICS 



CROSS-REFERENCE TO RELATED APPLICATION 

Japanese Patent Application No. 2003-300363 
5 on which the present application is based and which was 
applied on Aug. 25, 2003 is herein incorporated by 
reference . 

BACKGROUND OF THE INVENTION 
Field of the Invention 
10 The present invention relates to an 

apparatus, method, and program for partitioning and 
managing logics which are present in a subsystem, and a 
recording medium for recording the program. 

Description of the Related Art 

15 A storage subsystem is proposed which is 

expected to be accessed from a variety of types of 
computers and which compriscs has a port to which an 
interface for connecting to a plurality of computers 
can be applied, a logical unit (LU) which can be 

20 accessed from oaid the computers via said port, one or a 
plurality of storage devices for storing data 
bew hich is stored in said logical unit, and a storage 
control device for conducting read/write control on 
the oai d storage devices in order to realize security 
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for each logical unit while effectively utilizing 
system resources in a conventional Logical Unit Number 
(LUNJ_ security function . The 7 — where i n said computers 
accessing -sai d the logical unit are grouped into groups 
5 in such a manner that the oaid computers can overlap 
each other . Each 7 — each of said of the groups is 
assigned one or a plurality of logical units, and a 
management table is provided which correlates the oaid 
assigned logical units and storage regions of the oaid 
10 storage devices in such a manner that they can overlap 
each other. 

On the other hand, aft the increasing storage 
capacity of a storage system has prompted large-scale 
storage consolidation. By th o With storage 

15 consolidation, in a subsystem, there are prcocnt exist 
in a mixed manner a plurality of data belonging to a 
plurality of systems/applications. However, a security 
function in an aspect of storage management involved in 
storage consolidation has not sufficiently been 

2 0 provided by a GUI -level masking technology or 

conventional technologyie^ that provides security 
functions e^for data access itself. 

That is, according to the conventional GUI- 
level masking etc., resources of upper storage 

25 management software are not partitioned on an interface 
which is adapted to instruct an actual storage to 
change a configuration. This is a problem. Therefore, 
such an issue is left unsolved that by using this 
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interface, the configuration can be changed arbitrarily 
irrespective of a partitioning unit on a GUI etc. 

Further, conventionally, partitioning of 
resources to such an extent that the upper storage 
5 management software can recognize (at a logical -volume 
level) is possible, whereas partitioning of physical 
resources that cannot be recognized by the management 
software (e.g., at an HDD level) has been impossible. 
Furthermore, even in the case of this partitioning at 

10 the logical -volume level, it cannot be known to which 
physical resources the logical volumes are allocated, 
so that some of the resources, even if partitioned as 
described above, may be common physically in some 
cases, which remains as a problem in performance or 

15 security. 

Therefore, in a case where partitioning of 
logics of a subsystem in which storage consolidation 
has been performed is managed according to the 
conventional method, there is a possibility that an 

20 administrator may mistakenly perform an operation such 
as addition/deletion even to a region of other users, 
administrators and companies in relation to processing 
such as addition/deletion because such processing can 
be performed on an LU by configuration changing 

25 functions of an RAID. This may cauoo lead to system 
panic or user data destruction. 

SUMMARY OF THE INVENTION 
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Therefore, to accommodate storage 
consolidation and allow some of the configuration 
changing functions of an RAID for multiple 
administrators, in view of the above problems, the 
5 storage system and the storage management software need 
to have a function to guard against configuration 
changing of unauthorized area system area from an 
administrator other than the system area which is 
assigned for the administrator. 

10 In view of such a background, the present 

invention has been made and it is an object of the 
present invention to provide a subsystem logics 
partitioning and managing apparatus, method, and 
program for enabling configuration changing functions 

15 of an RAID within a predetermined limit, and a 
recording medium for recording the program. 

For this end, a subsystem logics partitioning 
and managing apparatus according to one feature of the 
present invention comprises: 

2 0 means for recognizing logical resources and 

physical resources that constitute a subsystem; 

a partition definition table in which logical 
and physical resources in said subsystem are assigned 
for each user at an interface level at which a storage 

25 configuration can be referenced by a storage management 
program; 

an account table in which a partition- 
specific account is set for each user defined in said 
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partition definition table; 

means for receiving a user account 
transmitted from an information processing unit and 
collating the received user account to said account 
table to thereby recognize a partition corresponding to 
said user; and 

means for outputting logical resources and 
physical resources that are included in said recognized 
partition to an output interface as a resource 
configuration in said subsystem. 

The subsystem logics partitioning and 

managing apparatus comprises means for outputting, at a 
GUI level, logical resources and physical resources 
that are contained in said partition to an output 
15 interface as a resource configuration in said subsystem. 

The subsystem logics partitioning and 

managing apparatus comprises means for accepting from 
the information processing unit a request for changing 
a configuration of said output logical resources or 
20 physical resources and changing said configuration of 
said logical resources or said physical resources in 
said partition definition table. 

Resources to be assigned for each user in 

said partition definition table include a port, a 
25 lo gical u nit, a logical device indica tive of a logical 
storage region assigned to said logical unit, and a 
disk unit group Having a disk unit dud a parity bit, -use 
disk unit which st cres da ta recovery i nfo r ma tion c f 
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said disk unit. 

The subsystem logics partitioning and 

managing ap paratus comprises means for collating a 
re guested specification of a logical unit accepted from 
an information processing unit to an assignment policy 
for said logical device and said disk unit group that 
are defined for each user, to perform assignment of a 
logical device and a disk unit group in accordance with 
said policy, thereby generating a logical unit. 

The assignment policy comprises: 

a first policy for selecting said logical 

device from a disk unit group to which no other 
partitions are assigned and in which no such disk unit 
group is present that control on input/output 
operations to disk units is conducted via the same 
adapter, to generate a logical unit; 

a second policy for selecting said logical 

device from a disk unit group to which no other 
partitions are assigned, to generate a logical unit; 
and 

a third policy for selecting said logical 

device from a disk unit group to which no other 
partitions that correspond to said first and second 
policies are assigned, to generate a logical unit. 

Furthermore, resources to be assigned for 

each user include a cache. 

According to another feature of the present 
invention there is provided a method for partitioning 
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and managing logics in a subsystem which comprises a 
partition definition table in which logical resources 
and physical resources in said subsystem are assigned 
for each user at an interface level at which a computer 
5 can reference a storage configuration by using a 
storage management program and an account table in 
which a part it ion- specif ic account is set for each user 
that is defined in said partition definition table, 
said method comprising the steps of: 

10 recognizing said logical and physical 

resources that constitute said subsystem; 

receiving an account of a user transmitted 
from an information-processing device and collating the 
received user account to said account table, to 

15 recognize a partition corresponding to said user; and 
outputting logical and physical resources 
contained in said recognized partition to an output 
interface as a resource configuration in said 
subsystem . 

20 According to a further feature of the present 

invention there is provided a subsystem logics 
partitioning and managing program for causing a 
computer capable of utilizing a partition definition 
table in which logical resources and physical resources 

25 in a subsystem are assigned for each user at an 

interface level at which a storage configuration can be 
referenced by using a storage management program and an 
account table in which a partition-specific account is 
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set for each user that is defined in said partition 
definition table to perform a method for partitioning 
and managing logics of said subsystem, said program 
comprising the steps of: 
5 recognizing said logical and physical 

resources that constitute said subsystem; 

receiving an account of a user transmitted 
from an information-processing device and collating the 
received user account to against said account table, to 

10 recognize a partition corresponding to said user; and 
outputting logical and physical resources 
contained in said recognized partition to an output 
interface as a resource configuration in said 
subsystem. This program is comprised of codes for 

15 performing said steps. 

According to a still further feature of the 
present invention there is provided a computer-readable 
recording medium for recording said subsystem logics 
partitioning and managing program. 

20 The other problems and the corresponding 

solutions disclosed in the present application will be 
made clear by description of embodiments of the present 
invention and drawings. 

According to the present invention, the 

25 configuration changing functions of the RAID can be 
released within a predetermined range. 



BRIEF DESCRIPTION OF THE DRAWINGS 
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Other objects, features and advantages of the 
present invention will now become apparent from the 
description of the embodiments of the invention in 
conjunction with the accompanying drawings. 
5 FIG. 1 is an illustration for showing a 

configuration of a storage system according to an 
embodiment of the present invention. 

FIG. 2 is an illustration for showing a use 
case image according to the present embodiment . 
10 FIG. 3A is an illustration for showing a 

relationship among a disk array device, an API, and a 
GUI according to a conventional example. 

FIG. 3B is an illustration for showing the 
relationship among a disk array device, an API, and a 
15 GUI according to the present embodiment . 

FIG. 4 is a flowchart for showing an initial 
partition definition flow (with a policy) according to 
the present embodiment . 

FIG. 5 is a flowchart for showing the initial 
20 partition definition flow (without policy) according to 
the present embodiment . 

FIG. 6 is a flowchart for showing a 
configuration referencing/updating flow according to 
the present embodiment . 
25 FIG. 7 is an illustration for showing a 

system configuration (with a policy base resource 
assigning function) and a partition definition table. 

FIG. 8 is an illustration for showing the 
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system configuration (without policy base resource 
assigning function) and the partition definition table. 

FIG. 9 is an illustration for showing one 
example of an account table. 



5 DETAILED DESCRIPTION OF THE EMBODIMENTS 
<System Conf iguration> 

FIG. 1 shows a configuration of a storage 
system according to the present embodiment. A 
subsystem 10 and a host 25 are interconnected via an 

10 interface 3 0 (hereinafter referred to as fibre channel 
30) such as, for example, an SCSI or a fibre channel. 
As one example of an information processing unit, the 
host 25 is, for example, an open-system type computer 
and can be assumed to be a personal computer or 

15 workstation in which an open-system type operating 
system (OS) operates. The subsystem 10 comprises a 
plurality of ports 11 for connection with ports of the 
fibre channel 30, a channel adapter (CHA) 12 for 
controlling a cache and data transfer, a service 

20 processor 13 (here referred to as SVP) , a shared memory 
14 for storing configuration information for use in 
control, a disk adapter (here referred to as DKA) 15 
for controlling input/output operations to be performed 
to a storage device 16 such as an HDD, and the storage 

25 device 16. 

Further, as described above, not in a 
physical configuration but in a logical configuration, 
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the subsystem 10 comprises the ports 11, a host group 
18 (here referred to as Host Group) assigned to the 
port 11, a logical unit 19 (hereinafter referred to as 
LU) , a logical device 20 (hereinafter referred to as 
5 LDEV) , and a disk unit group 21 (here referred to as 
ECC Group) . 

It is to be noted that a storage region of 
the storage system which is provided to the LU19 is 
managed in units of the LDEV20 (Logical Device) . The 

10 LDEV20 is a logical volume includes a part of some disk 
units that compose a disk unit group of the disk array. 
The host 25 specifies storage regions to be provided by 
the LDEV20, in units of said LU19 . The LUsl9 are each 
given a Logical Unit Number (LUN) , which is a unique 

15 identifier. At the host 25, the LUN can be, for 
example, a drive name or a device file name. 

Further, said disk unit group 21 is comprised 
of a disk unit and a parity bit-use disk unit for 
storing data recovery information of this disk unit, 

20 which disk unit group 21 itself constitutes the LDEV2 0 . 

A management client 4 0 performs input /output 
operations to this subsystem 10 through a network 3 5 
such as an LAN and performs management processing. 
This management client 40 may be referred to as an 

25 input interface that permits an administrator 

(hereinafter referred to as user) of logical/physical 
resources in the subsystem 10 which are partitioned and 
managed by a method according to the present invention 
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to reference a configuration of these resources or 
request for changing the configuration. This 
management client 4 0 can have access through the 
network 35 to a managing configuration information 
5 (partition definition table) 17 of the service 

processor 13, and reference only a configuration region 
of predetermined resources defined for the user and 
change it . 

FIG. 2 is an illustration for showing a use 

10 case image according to the present embodiment. By 

applying a subsystem logics partitioning and managing 
method according to the present invention, even in the 
subsystem 10 in which a large-scale storage 
consolidation has been performed, data belonging to a 

15 plurality of systems/applications present in a mixed 
manner are partitioned for each of said users so that 
none of said users can violate a boundary between 
partitions . 

That is, in contrast to, for example, a 

20 conventional GUI-level masking technique etc., 
resources of storage management software are 
partitioned on an interface provided for instructing an 
actual storage to change a configuration (which 
interface is supposed to be an application program 

25 interface (API)). Therefore, even if this interface is 
utilized to place access from the management client 40 
to a partition 50 in the subsystem 10, no contradiction 
occurs between a partitioning unit returned from the 
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service processor 13 to this management client 4 0 and a 
range within which the configuration can be changed. 

For example, even if certain access to the 
partition 50 through the management client 40 is 
5 normal, access to any one of the other partitions 51-53 
is not permitted. Further, GUI display about the other 
partitions is not output. Alternatively, even if GUI 
display is given also about other partitions, changing 
etc. of the resource configuration is not accepted. In 

10 this case, a relationship among a display, the API, and 
the GUI is such as shown in FIG. 3. Partitioning 
processing by the conventional technologies has been 
realized at a GUI level, to enable viewing or operating 
even a configuration of all of the resources at an API 

15 level. However, according to the present invention, 
the user is permitted to perform viewing or a variety 
of operations only to a resource configuration at the 
GUI level, so that even a trial is made to view or 
change the resource configuration at, for example, the 

20 API level, only a configuration of the resources 

assigned to this user is presented from the beginning. 
That is, partitioning is established even at the API 
level . 

A storage manager managing the subsystem 10 
25 integrally assigns the disk unit group 21 (in a logical 
configuration) that constitutes a partition for each of 
said users from the disk unit group 21 (in a physical 
configuration) included in the subsystem 10. In this 
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case, the service processor 13 can perform this 
processing by applying an internal hierarchy control 
function (hereafter referred to as HIHSM) for 
moving/rearranging data to an optimal disk drive in 
5 accordance with access properties in the subsystem in 
which there are in a mixed manner a plurality of disk 
drives having different properties such as performance 
and a capacity. 

Further, by applying a function (hereafter 

10 referred to as CVS) for creating a logical unit having 
an arbitrary size, a disk capacity can be utilized 
efficiently. Furthermore, by applying a function 
(hereafter referred to as LUSE) for combining a 
plurality of standard logical units to create a mass- 

15 capacity LU, it is possible to provide the logical unit 
19 having a huge size to the host, thus accommodating a 
large-scale application . 

It is to be noted that by further applying a 
method according to the present invention to a 

20 subsystem to which conventionally proposed LUN security 
has been applied, in addition to a LUN security 
function for enabling setting an accessible host for 
each logical unit, such a function can also be provided 
as to correlate resource configuration display and a 

25 configuration changing permission/rejection scope for 
each of the users in the subsystem, which is 
preferable. Moreover, it is possible also to place 
access restrictions on a request for referencing/ 
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changing of the resource configuration at an API level, 
thus further improving the security. 



<Description of Processing> 

Description will be made of an actual 
5 procedure for performing subsystem logics partitioning 
and managing method according to an embodiment of the 
present invention. It is to be noted that various 
operations corresponding to the subsystem logics 
partitioning and managing method described below are 
10 realized by a program which is utilized by the service 
processor 14, which program is comprised of codes which 
are used to perform the various operations described 
below. 

FIG. 4 is a flowchart for showing an initial 
15 partition definition flow (with a policy) according to 
an embodiment of the present embodiment. First, 
initial partitioning to be performed in response to a 
request sent from the user is described. The service 
processor 14 is supposed to have recognized logical and 
20 physical resources that constitute the subsystem 10, 
beforehand. Information of this configuration is 
stored in the managing configuration information 17 
(s400) . This configuration information 17 provides a 
definition table in which the logical resources and the 
25 physical resources in the subsystem are assigned for 
each of the users at an interface level at which a 
storage configuration can be referenced by the storage 
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management program, that is, an API level. 

In a partition definition table in FIG. 7 
showing a system configuration (with a policy base 
resource assigning function) and the partition 
5 definition table, such a data configuration is provided 
that using a name of "User" as a key, IDs of a policy 
set about this user, and said port 11, host group 18, 
LVOL, LDEV20, and disk unit group (ECC) 21 that are 
assigned are related with columns 500-506 respectively. 

10 When having received a user account 

transmitted as involved in access from an information 
processing unit such as said host 25 (s401) , said 
service processor 14 collates the received user account 
to an account table (Fig. 9) for checking. FIG. 9 

15 shows one example of an account table 600 . The account 
table 600 has such a data configuration that using said 
name of "User" as a key, a user ID and a password are 
related with columns 601-603. These user ID and 
password can be registered only by an upper user 

2 0 (supervisor) . 

The service processor 14 can recognize or 
identify the partition 50 that corresponds to this 
user, based on said collation. For example, if the 
user name is "odawara", a configuration of accessible 

25 resources will be such that ports "1A" and "2A" 

correspond to host groups "00" and "00" respectively, 
with the LDEVs being "00.00" through "00.03", and the 
disk unit group being "1-1". 
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On the other hand, when having received a 
partition creation instruction containing instruction 
information such as a port, a host group, an LVOL, or a 
policy from the user (s402) , it collates a required 
5 specification of the logical unit 19 accepted from the 
information processing unit such as the host 25, with 
respect to an assignment policy for said logical device 
19 and said disk unit group 21 that are defined for 
each of the users. FIG. 7 is an illustration for 

10 showing a system configuration (with a policy base 

resource assigning function) and a partition definition 
table. In this case, as shown in FIG. 7, said 
assignment policy is supposed to have been defined for 
each of the users in the managing configuration 

15 information 17. 

Therefore, the managing configuration 
information 17 in the present embodiment has such a 
data configuration that using "User" as a key, the 
assignment policy, the port, the host group, the LVOL 

20 (virtual unit that corresponds to the required 

specification request) , the LDEV, and the disk unit 
group are related with the columns 500-506. However, 
until the LVOL that corresponds to said use request is 
defined, said LDEV and said disk unit groups remain 

2 5 undefined. 

The service processor 14 recognizes this 
policy based on said managing configuration information 
17 (s403) . If the user is, for example, "odawara", the 
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relevant assignment policy is "independent 11 (written as 
"independent") . This "independent" policy provides a 
first policy that gives a provision to the effect that 
"a logical unit should be generated by selecting a 
5 logical device from a disk unit group to which no other 
partitions are assigned and in which no such disk unit 
group is present that control on input/output 
operations to disk units is conducted via the same 
adapter" . 

10 Further, as an example of the other policies, 

there is a second policy, that is, "partially shared" 
policy (hereafter referred to as "partial") that gives 
a provision to the effect that "a logical unit should 
be generated by selecting said logical device from a 

15 disk unit group to which no other partitions are 
assigned" . 

Furthermore, there is a third policy, that 
is, "shared use" policy (hereafter referred to as 
"shared") that gives a provision to the effect that "a 

20 logical unit should be generated by selecting said 

logical device from a disk unit group to which no other 
partitions corresponding to said first and second 
policies are assigned" . 

The service processor 14, which has 

25 recognized the assignment policy as described above, 

performs assignment of a logical device and a disk unit 
group that correspond to this policy (s404) . Based on 
these selected logical device and disk unit group, it 
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generates a logical unit (s405) . Now that the logical 
unit has been thus generated and so the resource 
configuration of this user's partition has been 
updated, of course said managing configuration 
5 information 17 is also updated. That is, the process 
registers the resources in the partition definition 
table (s406) and ends the processing. 

FIG. 5 is a flowchart for showing the initial 
partition definition flow (without policy) according to 

10 the present embodiment. Next, initial partitioning 
processing in response to a request from the user in 
the case of taking into account no policy is described. 
The service processor 14 is supposed to have recognized 
beforehand the logical and physical resources that 

15 constitute the subsystem 10. Information of this 

configuration is stored in the managing configuration 
information 17 beforehand (s500) . This managing 
configuration information 17 provides a definition 
table in which the logical resources and the physical 

20 resources in the subsystem are assigned for each of the 
users at an interface level at which the storage 
configuration can be referenced by the storage 
management program, that is, an API level. 

In a partition definition table in FIG. 8 

25 showing the system configuration (without policy base 
resource assigning function) and the partition 
definition table, such a data configuration is provided 
that using a name of "User" as a key, IDs of said port 
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11, host group 18, LDEV20, and disk unit group (ECC) 21 
that are assigned to this user are related to columns 
400-404 . 

When having received a user account 
5 transmitted as involved in access from an information 
processing unit such as said host 25 (s501) , said 
service processor 14 collates the received user account 
against the account table (see FIG. 9) the same way as 
described above. 

10 The service processor 14 can recognize the 

partition 50 that corresponds to this user, based on 
said collation. For example, if the user name is 
"odawara" , a configuration of accessible resources will 
be such that ports " 1A" and "2A" correspond to host 

15 groups "00" and "00" respectively, with the LDEVs being 
"00.00" through "00.03", and the disk unit group being 
"1-1" . 

On the other hand, when having received a 
partition creation instruction containing instruction 

2 0 information such as a port, a host group, or an LVOL 
from the user (s502) , it collates a required 
specification of the logical unit 19 accepted from the 
information processing unit such as the host 25 against 
a situation, contained in the managing configuration 

25 information 17, in which said logical device 19 and 
said disk unit group 21 are assigned to the other 
users. As shown in FIG. 8, said managing configuration 
information 17 has such a data configuration that using 
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"User" as a key, the assigned port, host group, LDEV, 
and disk unit group are related with the columns 400- 
404 . 

Said service processor 14, which has 
5 recognized the resources that can be assigned to said 
user based on said managing configuration information 
17, assigns a logical device and a disk unit group 
(s503). Based on these selected logical device and 
disk unit group, it generates a logical unit (s504) . 

10 Now that the logical unit has been thus generated and 
so the resource configuration of this user's partition 
has been updated, of course said managing configuration 
information 17 is also updated. 

That is, the process registers the resources 

15 in the partition definition table (s505) and ends the 
processing . 

Next, resource configuration referencing/ 
updating to be performed in response to a request from 
the user is described. FIG. 6 is a flowchart for 

20 showing a configuration referencing/updating flow 
according to the present embodiment. The service 
processor 14 is supposed to have recognized beforehand 
the logical and physical resources that constitute the 
subsystem 10 (s600) . Information of this configuration 

25 is stored in the managing configuration information 17 
as described above. 

The service processor 14 accepts from an 
information processing unit such as said host 25 a 
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user's login request involving a specification of a 
user ID and a password and goes through appropriate 
authentication processing, to perform login processing 
(s601) . When having received a user account 
5 transmitted as involved in the login (s602) , the 

service processor 14 collates it against an account 
table shown in FIG. 9 as described above. 

The service processor 14 can recognize the 
partition 50 that corresponds to this user, based on 

10 said collation (s603) . For example, if the user is 

"odawara", a configuration of accessible resources will 
be such that ports "1A" and " 2A" correspond to host 
groups "00" and 11 00" respectively, with the host group 
being "00", the LDEVs being "00.00" through "00.03", 

15 and the disk unit group being "1-1" (see FIG. 7 or 8) . 

The service processor 14 outputs to said host 
25 the logical resources and the physical resources 
that are contained in said recognized partition 50, as 
a resource configuration in the subsystem (s604). If, 

20 then, no changing request is sent from the host 25 (NO 
at s605) , the processing ends. If a changing request 
is sent from the host 25 (YES at s605) , on the other 
hand, it is accepted (s606) . In this case, of course, 
the other partitions or changing requests from the 

25 other partitions are rejected. 

The service processor 14, which has received 
said changing request, allows rewriting of the relevant 
logical resources or physical resources in said 
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managing configuration information 17. Alternatively, 
it changes contents of the table in order to change the 
configuration in accordance with contents of the 
changing request (s607) and ends the processing. 
5 It is to be noted that said service processor 

14 can also output at a GUI level to said host 25 the 
logical resources and the physical resources that are 
contained in a partition 50 assigned for each user, as 
a resource configuration in the subsystem. It is to be 

10 noted that the resource configuration to be output at 
the GUI level is supposed to contain only such 
resources that a user's request for configuration 
changing/viewing can be accepted. Therefore, a request 
for changing/viewing about partitions of the other 

15 users or from the other partitions is rejected. 

Alternatively, such a configuration may be provided 
that only viewing is permitted but configuration 
changing is not accepted. 

In said GUI output, such data may be assumed 

20 that a relationship among said resources is configured 
in a tree format. Further, a pattern of the GUI output 
may be any of a variety of applicable ones such as a 
pattern in which only the partition 50 of said user is 
displayed and the other partitions are masked, a 

25 pattern in which resources shared in the configuration, 
if any, are added to said partition 50 and displayed, 
and a pattern in which all the partitions are displayed 
but configuration changing of only the partition 50 is 



APPENDIX A - 24 - 

accepted. 

Furthermore, displaying/masking of said 
configuration resources may be subject to output 
processing based on a policy in said managing 
5 configuration information 17, in such a manner that if, 
for example, the policy is "independent", only the 
configuration resources of the relevant user are 
displayed, that if the policy is "shared use", both the 
configuration resources of the relevant user and those 

10 of the other users are displayed, and that if it is 
"partially shared", engagement between the 
configuration resources of the relevant user and those 
shared by him and the other users is also displayed. 

As described above, the subsystem logics 

15 partitioning and managing method according to the 

present invention is performed for managing, at an API 
level, access to a partition of interest from an 
information processing unit and changing of a 
configuration . 

20 It is thus possible to release (some of) the 

configuration changing functions of the RAID while 
keeping security, for each of the partitions 50, that 
is, for each system or each user of an application. 
That is, said user can perform addition/changing of 

25 settings of resources within a range of volumes 
assigned by a storage manager. 

Such an effect becomes more significant 
especially in a situation that storages of a plurality 
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of systems are present in a mixed manner in one 
subsystem owing to storage consolidation, thereby 
providing a merit of integrated management due to 
storage consolidation without deteriorating convenience 
5 of each user. 

Therefore, it is possible to provide a 
subsystem logics partitioning and managing apparatus, 
method, and program for enabling releasing 
configuration changing functions of the RAID within a 

10 predetermined range, and a recording medium for 
recording the program. 

Although the present invention has been 
described with reference to its embodiments, the 
present invention is not limited to them but may be 

15 modified variously without departing from its gist in 
scope . 



ABSTRACT OF THE DISCLOSURE 

A subsystem logics partitioning and managing 
apparatus comprises a recognition unit for recognizing 
logical and physical resources that constitute a 
subsystem a partition definition table in which the 
logical and physical resources in the subsystem are 
assigned for each user at an interface level at which a 
storage configuration can be referenced by a storage 
management program an account table in which an account 
is set for each user-specific partition defined in the 
partition definition table a receiving unit for 
receiving a user account transmitted from an 
information processing unit and checking the received 
user account against the account table, to recognize a 
partition that corresponds to the user and a unit for 
outputting, at a GUI level, logical resources and 
physical resources that are contained in the recognized 
partition to an output interface as a resource 
configuration in the subsystem. 



